Known CVE

Geo Mashup <= 1.13.17 - SQL Injection

Geo Mashup WordPress plugin <= 1.13.17 contains a SQL injection caused by insufficient escaping of the 'sort' parameter, letting unauthenticated attackers extract sensitive database information remotely.

CVE-2026-2416

High2026CVSS 7.5CWE-89

cve2026 · wordpress · wp · wp-plugin · sqli · geo-mashup · unauth

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website